So I am looking for a way to grant JWTs to our team that allows me to assign a role of

team-member

and would be valid for any subdomain of my tld.